[v4 16/17] arm: socfpga: soc64: Enable FIT image generation using binman

[Lim, Elly Siew Chin]

Hi Simon,

We call binman to generate itb file in "make fit-itb".

We didn't put it in default binman flow is because it require Arm-trusted-firmware (bl31.bin) and Linux Image and dtb to build the itb file. These files are not part of u-boot. The user will hit compilation error if these files are not prepared before they build u-boot. Besides, we are in progressing enabling Vendor Authorized Boot (VAB) for Intel SoC FPGA, which requires u-boot prope, dtb, bl31.bin and Linux Image, dtb to be signed before generate the itb. The signing process involves another signing tool. 

We prefer not to add new dependency into default u-boot compilation process. As a result, we build itb files with "make fit-itb".

Thanks,
Siew Chin


> -----Original Message-----
> From: Simon Glass <sjg at chromium.org>
> Sent: Saturday, December 19, 2020 10:29 AM
> To: Lim, Elly Siew Chin <elly.siew.chin.lim at intel.com>
> Cc: U-Boot Mailing List <u-boot at lists.denx.de>; Marek Vasut
> <marex at denx.de>; Tan, Ley Foon <ley.foon.tan at intel.com>; See, Chin Liang
> <chin.liang.see at intel.com>; Simon Goldschmidt
> <simon.k.r.goldschmidt at gmail.com>; Chee, Tien Fong
> <tien.fong.chee at intel.com>; Westergreen, Dalon
> <dalon.westergreen at intel.com>; Gan, Yau Wai <yau.wai.gan at intel.com>
> Subject: Re: [v4 16/17] arm: socfpga: soc64: Enable FIT image generation using
> binman
> 
> Hi Siew,
> 
> On Thu, 17 Dec 2020 at 20:29, Siew Chin Lim <elly.siew.chin.lim at intel.com>
> wrote:
> >
> > Add new build target "fit-itb" for FIT image generation.
> >
> > In preparation to support Vendor Authorized Boot (VAB) for Intel
> > SOC64 device in near future. With VAB, u-boot proper, dtb and arm
> > trusted firmware need to be signed before FIT image generation.
> >
> > To align user experience for ATF boot with and without VAB feature, we
> > skip binman for ARCH_SOCFPGA in default Makefile flow. User always use
> > 'make fit-itb' to generate FIT image after successfully compile
> > u-boot.
> >
> > Signed-off-by: Siew Chin Lim <elly.siew.chin.lim at intel.com>
> >
> > ---
> > v2
> > ---
> > Adjust BINMAN sequence in code, sorted by alphabetical order.
> > ---
> >  Makefile                      | 7 +++++++
> >  arch/arm/mach-socfpga/Kconfig | 2 ++
> >  2 files changed, 9 insertions(+)
> 
> Can't we make binman do this?
> 
> Regards,
> Simon